Vulnerabilities > CVE-2019-5641 - Insufficient Session Expiration vulnerability in Rapid7 Insightvm

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

network

low complexity

rapid7

CWE-613

NVD

Published: 2022-09-21

Updated: 2022-09-23

Summary

Rapid7 InsightVM suffers from an information exposure issue whereby, when the user's session has ended due to inactivity, an attacker can use the Inspect Element browser feature to remove the login panel and view the details available in the last webpage visited by previous user

Vulnerable Configurations

Part	Description	Count
Application	Rapid7 Rapid7 Insightvm - Rapid7 Insightvm 6.4.31 Rapid7 Insightvm 6.4.33 Rapid7 Insightvm 6.4.34 Rapid7 Insightvm 6.4.35 Rapid7 Insightvm 6.4.36 Rapid7 Insightvm 6.4.37 Rapid7 Insightvm 6.4.38 Rapid7 Insightvm 6.4.39 Rapid7 Insightvm 6.4.40 Rapid7 Insightvm 6.4.41 Rapid7 Insightvm 6.4.42 Rapid7 Insightvm 6.4.43 Rapid7 Insightvm 6.4.44 Rapid7 Insightvm 6.4.45 Rapid7 Insightvm 6.4.46 Rapid7 Insightvm 6.4.47 Rapid7 Insightvm 6.4.48 Rapid7 Insightvm 6.4.49 Rapid7 Insightvm 6.4.50 Rapid7 Insightvm 6.4.51 Rapid7 Insightvm 6.4.52 Rapid7 Insightvm 6.4.53 Rapid7 Insightvm 6.4.54 Rapid7 Insightvm 6.4.55 Rapid7 Insightvm 6.4.56 Rapid7 Insightvm 6.4.57 Rapid7 Insightvm 6.4.58 Rapid7 Insightvm 6.4.59 Rapid7 Insightvm 6.4.60 Rapid7 Insightvm 6.4.61 Rapid7 Insightvm 6.4.62 Rapid7 Insightvm 6.4.63 Rapid7 Insightvm 6.4.64 Rapid7 Insightvm 6.4.65 Rapid7 Insightvm 6.4.66 Rapid7 Insightvm 6.4.67 Rapid7 Insightvm 6.5.0 Rapid7 Insightvm 6.5.1 Rapid7 Insightvm 6.5.2 Rapid7 Insightvm 6.5.3 Rapid7 Insightvm 6.5.4 Rapid7 Insightvm 6.5.5 Rapid7 Insightvm 6.5.6 Rapid7 Insightvm 6.5.7 Rapid7 Insightvm 6.5.8 Rapid7 Insightvm 6.5.9 Rapid7 Insightvm 6.5.10 Rapid7 Insightvm 6.5.11 Rapid7 Insightvm 6.5.12 Rapid7 Insightvm 6.5.13 Rapid7 Insightvm 6.5.14 Rapid7 Insightvm 6.5.15 Rapid7 Insightvm 6.5.16 Rapid7 Insightvm 6.5.17 Rapid7 Insightvm 6.5.18 Rapid7 Insightvm 6.5.19 Rapid7 Insightvm 6.5.20 Rapid7 Insightvm 6.5.21 Rapid7 Insightvm 6.5.22 Rapid7 Insightvm 6.5.23 Rapid7 Insightvm 6.5.24 Rapid7 Insightvm 6.5.25 Rapid7 Insightvm 6.5.26 Rapid7 Insightvm 6.5.27 Rapid7 Insightvm 6.5.28 Rapid7 Insightvm 6.5.29 Rapid7 Insightvm 6.5.30 Rapid7 Insightvm 6.5.31 Rapid7 Insightvm 6.5.32 Rapid7 Insightvm 6.5.33 Rapid7 Insightvm 6.5.34 Rapid7 Insightvm 6.5.35 Rapid7 Insightvm 6.5.36 Rapid7 Insightvm 6.5.37 Rapid7 Insightvm 6.5.38 Rapid7 Insightvm 6.5.39 Rapid7 Insightvm 6.5.40 Rapid7 Insightvm 6.5.41 Rapid7 Insightvm 6.5.42 Rapid7 Insightvm 6.5.43 Rapid7 Insightvm 6.5.44 Rapid7 Insightvm 6.5.45 Rapid7 Insightvm 6.5.46 Rapid7 Insightvm 6.5.47 Rapid7 Insightvm 6.5.48 Rapid7 Insightvm 6.5.49 Rapid7 Insightvm 6.5.50 Rapid7 Insightvm 6.5.51 Rapid7 Insightvm 6.5.52 Rapid7 Insightvm 6.5.53 Rapid7 Insightvm 6.5.54 Rapid7 Insightvm 6.5.55 Rapid7 Insightvm 6.5.56 Rapid7 Insightvm 6.5.57 Rapid7 Insightvm 6.5.58 Rapid7 Insightvm 6.5.59 Rapid7 Insightvm 6.5.60 Rapid7 Insightvm 6.5.61 Rapid7 Insightvm 6.5.62 Rapid7 Insightvm 6.5.63 Rapid7 Insightvm 6.5.64 Rapid7 Insightvm 6.5.65 Rapid7 Insightvm 6.5.66 Rapid7 Insightvm 6.5.67 Rapid7 Insightvm 6.5.68 Rapid7 Insightvm 6.5.69 Rapid7 Insightvm 6.5.70 Rapid7 Insightvm 6.5.71 Rapid7 Insightvm 6.5.72 Rapid7 Insightvm 6.5.73 Rapid7 Insightvm 6.5.74 Rapid7 Insightvm 6.5.75 Rapid7 Insightvm 6.5.76 Rapid7 Insightvm 6.5.77 Rapid7 Insightvm 6.5.78 Rapid7 Insightvm 6.5.79 Rapid7 Insightvm 6.5.80 Rapid7 Insightvm 6.5.81 Rapid7 Insightvm 6.5.82 Rapid7 Insightvm 6.5.83 Rapid7 Insightvm 6.5.84 Rapid7 Insightvm 6.5.85 Rapid7 Insightvm 6.5.86 Rapid7 Insightvm 6.5.87 Rapid7 Insightvm 6.5.88 Rapid7 Insightvm 6.5.89 Rapid7 Insightvm 6.5.90 Rapid7 Insightvm 6.5.91 Rapid7 Insightvm 6.5.92 Rapid7 Insightvm 6.5.93 Rapid7 Insightvm 6.5.94 Rapid7 Insightvm 6.5.95 Rapid7 Insightvm 6.5.96 Rapid7 Insightvm 6.5.97 Rapid7 Insightvm 6.5.98 Rapid7 Insightvm 6.6.0 Rapid7 Insightvm 6.6.1 Rapid7 Insightvm 6.6.2 Rapid7 Insightvm 6.6.3 Rapid7 Insightvm 6.6.4 Rapid7 Insightvm 6.6.5 Rapid7 Insightvm 6.6.6 Rapid7 Insightvm 6.6.7 Rapid7 Insightvm 6.6.8 Rapid7 Insightvm 6.6.9 Rapid7 Insightvm 6.6.10 Rapid7 Insightvm 6.6.11 Rapid7 Insightvm 6.6.12 Rapid7 Insightvm 6.6.13 Rapid7 Insightvm 6.6.14 Rapid7 Insightvm 6.6.15 Rapid7 Insightvm 6.6.16 Rapid7 Insightvm 6.6.17 Rapid7 Insightvm 6.6.18 Rapid7 Insightvm 6.6.19 Rapid7 Insightvm 6.6.20 Rapid7 Insightvm 6.6.21 Rapid7 Insightvm 6.6.22 Rapid7 Insightvm 6.6.23 Rapid7 Insightvm 6.6.24 Rapid7 Insightvm 6.6.25 Rapid7 Insightvm 6.6.26 Rapid7 Insightvm 6.6.27 Rapid7 Insightvm 6.6.28 Rapid7 Insightvm 6.6.29 Rapid7 Insightvm 6.6.30 Rapid7 Insightvm 6.6.31 Rapid7 Insightvm 6.6.32 Rapid7 Insightvm 6.6.33 Rapid7 Insightvm 6.6.34 Rapid7 Insightvm 6.6.35 Rapid7 Insightvm 6.6.36 Rapid7 Insightvm 6.6.37 Rapid7 Insightvm 6.6.38 Rapid7 Insightvm 6.6.39 Rapid7 Insightvm 6.6.40 Rapid7 Insightvm 6.6.41 Rapid7 Insightvm 6.6.42 Rapid7 Insightvm 6.6.43 Rapid7 Insightvm 6.6.44 Rapid7 Insightvm 6.6.45 Rapid7 Insightvm 6.6.46 Rapid7 Insightvm 6.6.47 Rapid7 Insightvm 6.6.48 Rapid7 Insightvm 6.6.49 Rapid7 Insightvm 6.6.50 Rapid7 Insightvm 6.6.51 Rapid7 Insightvm 6.6.52 Rapid7 Insightvm 6.6.53 Rapid7 Insightvm 6.6.54 Rapid7 Insightvm 6.6.55 Rapid7 Insightvm 6.6.56 Rapid7 Insightvm 6.6.57 Rapid7 Insightvm 6.6.58 Rapid7 Insightvm 6.6.59 Rapid7 Insightvm 6.6.60 Rapid7 Insightvm 6.6.61 Rapid7 Insightvm 6.6.62 Rapid7 Insightvm 6.6.63 Rapid7 Insightvm 6.6.64 Rapid7 Insightvm 6.6.65 Rapid7 Insightvm 6.6.66 Rapid7 Insightvm 6.6.67 Rapid7 Insightvm 6.6.68 Rapid7 Insightvm 6.6.69 Rapid7 Insightvm 6.6.70 Rapid7 Insightvm 6.6.71 Rapid7 Insightvm 6.6.72 Rapid7 Insightvm 6.6.73 Rapid7 Insightvm 6.6.74 Rapid7 Insightvm 6.6.75 Rapid7 Insightvm 6.6.76 Rapid7 Insightvm 6.6.77 Rapid7 Insightvm 6.6.78 Rapid7 Insightvm 6.6.79 Rapid7 Insightvm 6.6.80 Rapid7 Insightvm 6.6.81 Rapid7 Insightvm 6.6.82 Rapid7 Insightvm 6.6.83 Rapid7 Insightvm 6.6.84 Rapid7 Insightvm 6.6.85 Rapid7 Insightvm 6.6.86 Rapid7 Insightvm 6.6.87 Rapid7 Insightvm 6.6.88 Rapid7 Insightvm 6.6.89 Rapid7 Insightvm 6.6.90 Rapid7 Insightvm 6.6.91 Rapid7 Insightvm 6.6.92 Rapid7 Insightvm 6.6.93 Rapid7 Insightvm 6.6.94 Rapid7 Insightvm 6.6.95 Rapid7 Insightvm 6.6.96 Rapid7 Insightvm 6.6.97 Rapid7 Insightvm 6.6.98 Rapid7 Insightvm 6.6.99 Rapid7 Insightvm 6.6.100 Rapid7 Insightvm 6.6.101 Rapid7 Insightvm 6.6.102 Rapid7 Insightvm 6.6.103 Rapid7 Insightvm 6.6.104 Rapid7 Insightvm 6.6.105 Rapid7 Insightvm 6.6.106 Rapid7 Insightvm 6.6.107 Rapid7 Insightvm 6.6.108 Rapid7 Insightvm 6.6.109 Rapid7 Insightvm 6.6.110 Rapid7 Insightvm 6.6.111 Rapid7 Insightvm 6.6.112 Rapid7 Insightvm 6.6.113 Rapid7 Insightvm 6.6.114 Rapid7 Insightvm 6.6.115 Rapid7 Insightvm 6.6.116 Rapid7 Insightvm 6.6.117 Rapid7 Insightvm 6.6.118 Rapid7 Insightvm 6.6.119 Rapid7 Insightvm 6.6.120 Rapid7 Insightvm 6.6.121 Rapid7 Insightvm 6.6.122 Rapid7 Insightvm 6.6.123 Rapid7 Insightvm 6.6.124 Rapid7 Insightvm 6.6.125 Rapid7 Insightvm 6.6.126 Rapid7 Insightvm 6.6.127 Rapid7 Insightvm 6.6.128 Rapid7 Insightvm 6.6.129 Rapid7 Insightvm 6.6.130 Rapid7 Insightvm 6.6.131 Rapid7 Insightvm 6.6.132 Rapid7 Insightvm 6.6.133 Rapid7 Insightvm 6.6.134 Rapid7 Insightvm 6.6.135 Rapid7 Insightvm 6.6.136 Rapid7 Insightvm 6.6.137 Rapid7 Insightvm 6.6.138 Rapid7 Insightvm 6.6.139 Rapid7 Insightvm 6.6.140 Rapid7 Insightvm 6.6.141 Rapid7 Insightvm 6.6.142 Rapid7 Insightvm 6.6.143 Rapid7 Insightvm 6.6.144 Rapid7 Insightvm 6.6.145 Rapid7 Insightvm 6.6.146 Rapid7 Insightvm 6.6.147 Rapid7 Insightvm 6.6.148 Rapid7 Insightvm 6.6.149 Rapid7 Insightvm 6.6.150 Rapid7 Insightvm 6.6.151 Rapid7 Insightvm 6.6.152 Rapid7 Insightvm 6.6.153 Rapid7 Insightvm 6.6.154 Rapid7 Insightvm 6.6.155 Rapid7 Insightvm 6.6.156 Rapid7 Insightvm 6.6.157 Rapid7 Insightvm 6.6.158 Rapid7 Insightvm 6.6.159 Rapid7 Insightvm 6.6.160	297

Common Weakness Enumeration (CWE)

CWE-613 - Insufficient Session Expiration

References

https://docs.rapid7.com/release-notes/insightvm/20220830/